Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa
File:                     1AEC708A26EA11F0A1989F5AC4F9AE02.roa (raw, json)
Hash identifier:          TFJepYEysB3iUMn78QQ8MJx5YxB6gBhX99PPb6Be8+0=
Subject key identifier:   98:3B:72:3F:1A:8B:7A:4A:86:88:4D:95:82:2A:3F:66:7E:D5:60:50
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0531
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:14 +0000
ROA not before:           Thu 25 Sep 2025 02:21:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138997
IP address blocks:        218.33.84.0/22 maxlen: 24
                          218.33.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:07 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c36-e3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b8:71:c5:60:33:70:c4:e5:d2:8c:7e:59:99:
                    21:ca:fd:fc:cc:d8:6c:1c:50:c2:1a:40:08:91:18:
                    74:60:18:a9:d3:98:d0:ed:37:fa:0a:bc:d1:d3:28:
                    20:0e:20:5d:45:d5:d7:19:c2:83:4d:65:9c:45:b2:
                    3f:a0:77:f8:4a:52:1c:57:74:b2:04:6e:a9:ff:9d:
                    d0:db:0d:4e:96:e1:a0:5a:c8:29:95:50:76:58:35:
                    0c:83:26:24:14:f1:83:73:b4:81:a5:42:bd:ba:51:
                    6a:b0:35:27:5c:ef:f2:b1:47:45:f7:63:eb:00:a1:
                    04:46:16:3e:51:c7:c9:e8:bb:06:46:4a:8a:cd:e3:
                    e4:0b:28:a2:71:d6:11:35:74:34:12:5e:fb:ed:ac:
                    d9:73:65:9f:ba:db:21:06:23:97:62:2b:fe:90:17:
                    a0:26:eb:8e:d2:61:85:20:86:b4:52:1f:5d:ac:9b:
                    0b:d0:0f:09:43:95:76:86:13:19:5d:e4:ef:53:33:
                    7c:02:92:a6:68:ee:1d:60:f9:85:31:10:f8:dc:06:
                    8c:e2:5b:92:21:58:94:17:bb:39:05:e7:05:0f:cb:
                    57:96:97:b0:f3:d2:b0:41:61:8c:e2:a8:25:7e:2d:
                    f2:05:37:ac:f4:c6:ae:7c:be:86:ab:f3:66:3a:36:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:72:3F:1A:8B:7A:4A:86:88:4D:95:82:2A:3F:66:7E:D5:60:50
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.84.0-218.33.91.255

    Signature Algorithm: sha256WithRSAEncryption
         63:24:78:24:4a:06:c3:85:9e:37:e4:d3:93:bb:c5:02:b8:bd:
         36:c5:10:9e:e0:2e:e5:52:81:98:e7:68:28:27:9c:dc:42:ea:
         41:1b:5c:e8:61:e9:f7:bd:7b:ea:6c:18:89:5e:e2:3d:a8:a1:
         e2:4f:7a:d1:cf:f7:1e:c2:7c:94:ad:19:d6:e4:89:a0:d1:6e:
         12:8a:c7:c9:76:fa:87:c0:bd:77:e5:e6:f0:dc:83:e4:12:ac:
         ef:cb:bd:b8:28:d9:11:08:0e:6c:3f:59:b9:2b:63:67:5b:0e:
         a6:a8:2a:9c:10:f3:a3:31:32:b0:9b:c2:fe:b1:4b:5a:3d:f4:
         cf:95:e6:d8:54:c3:1b:bd:9c:e1:0a:0e:fd:c0:72:aa:3d:82:
         d5:aa:b3:35:a8:7c:d8:26:3d:99:c3:90:f5:f3:34:da:02:ee:
         7f:d2:be:8e:4c:71:83:e3:fe:1f:59:9e:61:e4:60:c0:c0:dc:
         4d:d6:96:2a:58:b9:dc:cc:97:3e:cb:8c:29:52:84:4a:c2:dd:
         6d:ca:b2:0f:8d:68:38:e8:c2:9d:df:a6:46:98:78:98:1f:ab:
         71:91:3e:83:cb:ce:50:c4:77:e7:2a:85:ac:3c:92:c6:b3:bf:
         57:20:17:a5:f6:e9:ab:09:7b:c9:e0:bd:32:a3:8f:22:da:bc:
         e6:16:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 08:04:00 2026 by rpki-client